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Abstract 

We consider dynamic subgraph connectivity problems for planar undirected graphs. In this 
model there is a fixed underlying planar graph, where each edge and vertex is either "off" (failed) 
or "on" (recovered). We wish to answer connectivity queries with respect to the "on" subgraph. 
The model has two natural variants, one in which there are d edge/ vertex failures that precede 
all connectivity queries, and one in which failures/recoveries and queries are intermixed. 

We present a d- failure connectivity oracle for planar graphs that processes any d edge/vertex 
failures in sort((i, n) time so that connectivity queries can be answered in pred((i, n) time. (Here 
sort and pred are the time for integer sorting and integer predecessor search over a subset of [n] of 
size d.) Our algorithm has two discrete parts. The first is an algorithm tailored to triconnected 
planar graphs. It makes use of Barnette's theorem, which states that every triconnected planar 
graph contains a degree-3 spanning tree. The second part is a generic reduction from general 
(planar) graphs to triconnected (planar) graphs. Our algorithm is, moreover, provably optimal. 
An implication of Patra§cu and Thorup's lower bound on predecessor search is that no d-failure 
connectivity oracle (even on trees) can beat pred((i, n) query time. 

We extend our algorithms to the subgraph connectivity model where edge/vertex failures 
(but no recoveries) are intermixed with connectivity queries. In triconnected planar graphs each 
failure and query is handled in O(logn) time (amortized), whereas in general planar graphs 
both bounds become 0(log^ n). 
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1 Introduction 



Algorithms for dynamic graphs have traditionally assumed that the graph evolves according to a 
completely arbitrary sequence of insertions and deletions of graph elements. This model makes 
minimal assumptions but often sacrifices efficiency for generality. For example, real world networks 
(router networks, road networks, etc.) do change slowly over time. However, the real dynamism of 
the networks comes from the frequent failure of edges/nodes and their subsequent recovery. In this 
paper we study connectivity problems in the dynamic subgraph model, which attempts to accurately 
model this type of dynamism. It is assumed that there is some fixed underlying graph whose nodes 
and edges can be OjQ^ (failed) or on; queries (connectivity queries, in our case) then answer questions 
about the subgraph turned on. The power of this model (compared to the fully dynamic graph 
model) stems from the ability to preprocess the underlying graph in advance. 

There are two natural variants of the dynamic subgraph model. In the d-failure version failures 
and recoveries occur in lockstep: a set F of d = |F| edges/nodes fail together. Our goal is to process 
F, ideally in 0{d) time, in order to answer connectivity queries in G\F. Here d may or may not 
be a parameter of the algorithm. In the fully dynamic model, node/edge failures and recoveries 
are presented one at a time and intermixed with connectivity queries, whereas in the decremental 
model the updates are restricted to failures. 

Results. We give new algorithms for subgraph connectivity (aka connectivity oracles) on undi- 
rected planar graphs in the d-failure model and the decremental model, all of which require linear 
preprocessing time. When failures are restricted to edges, we give an especially simple connec- 
tivity oracle that processes d edge failures (for any d) in 0(sort(d, n)) time and subsequently 
answers queries in 0(pred(d, n)) time. Here sort and pred refer to the time for sorting d in- 
tegers in the universe {l,...,n} and pred for the time for predecessor search, given soTt{d,n) 
preprocessing time. (It is known that sort ((i,n) = 0{d\oglogd) deterministically, 0{d^/loglogd) 
randomized |23| I24j. and 0{d) randomized if d < 2^^°^ """^ |4j. For predecessor search the bound is 
pred(d,n) = 0(min{ijfe, ^""iSgg^"" }) deterministically [201 [5] and 0(log log(n/d)) random- 
ized [321 EH.) 

The problem becomes more complicated when vertices fail since we cannot, in general, spend 
time proportional to their degrees. Our second algorithm is a d- failure connectivity oracle for 
edge and vertex failures with the same parameters (linear preprocessing, 0{soTt{d,n)) to process d 
failures, 0(pred((i, n)) time per query). It consists of two parts: a solution for triconnected graphs 
and a generic reduction from d-failure oracles in general graphs to d-failure oracles in triconnected 
graphs. Triconnectivity plays an important role in the algorithm as it allows us to apply Barnette's 
theorem [6j, which states that every triconnected planar graph contains a degree-3 spanning tree. 
It is known [30] that predecessor search is reducible to the d-edge/node failure connectivity problem 
on trees (and hence planar graphs). Our query time is therefore provably optimal. In particular, 
Patra§cu and Thorup's lower bound [29j implies that 0{loglog{n/ d)) query time cannot be beaten 
in general, even given 0((ipoly(logn)) time to preprocess the edge/node failures. 

Our third algorithm is in the decremental model. In triconnected planar graphs we can support 
vertex failures in O(logn) amortized time and connectivity queries in O(logn) time, whereas in 
general planar graphs both bounds become 0(log^n)j^ The logarithmic slowdown comes from a 

^These bounds are amortized over the actual number / of failures, i.e., in triconnected graphs processing / failures 
takes 0(/logn) time total. 
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new reduction from (planar) dynamic subgraph connectivity to the same problem in triconnected 
graphs. 

Prior Work on Dynamic Connectivity. Before surveying dynamic subgraph connectivity it 
is instructive to see what type of "off the shelf" solutions are available using traditional dynamic 
graph algorithms. The best known dynamic connectivity algorithms for general undirected graphs 
require 0(-v/n) worst case time per edge update [El [T7] or O(log^n) time amortized [26J. Vertex 
updates are simulated with 0{n) edge updates. In dynamic planar graphs the best connectivity 
algorithms take O(logn) time per edge update [T8] . 

Prior Work on Subgraph Connectivity. The dynamic subgraph model was proposed explic- 
itly by Frigioni and Italiano [21j . who proved that in planar graphs, node failures and recoveries 
could be supported in 0(log^ n) amortized time per operation and connectivity queries in 0(log^ n) 
worst case time. An earlier algorithm of Eppstein et al. [18j implies that edge failures, edge recov- 
eries, and connectivity queries in planar graphs require O(logn) time. In general graphs, Chan, 
Patra§cu, and Roditty ^Tj (improving ^lOj) showed that node updates could be supported in amor- 
tized time 0{m?^^), where m is the number of edges, and connectivity queries in 0(m^/^). Chan 
et al. [H [lOl [11] gave numerous applications of subgraph connectivity to geometric connectivity 
problems. The first algorithm with worst-case guarantees was given by Duan [13J, who showed that 
node updates and queries require only 0(m^/^) and 0(m^/^) time, respectively. 

In the d-edge failure model Patra§cu and Thorup |30] gave a connectivity oracle for general 
graphs that processes d failures in 0(dlog^ nloglogn) time and answers queries in O (log log n) 
time. However, their structure requires exponential preprocessing time; a variant constructible 
in polynomial time has a slower update time: 0((i log^^^ log log n). Duan and Pettie [15j gave a 
connectivity oracle in the d-node failure model occupying 0{mn^) space that processes failures in 
0(poly(d, logn)) time and answers queries in 0{d) time, where poly{d,n) depends on e. They also 
showed that a d-edge failure oracle could be constructed in 0{n) time with O(d^loglogn) update 
time and O(loglogn) query time. 

The distance sensitivity oracles avoiding 1 node failure \12\ |9j or 2 node failures |14j also, as a 
special case, answer 1- and 2-failure connectivity queries on directed graphs in 0(1) and O(logn) 
time, respectively. These data structures occupy O(n^) space. 

Overview Section [2] reviews notation and terminology. In Section|3]we describe our planar d-edge 
failure connectivity oracle. In Section [4] we give a d- vertex failure oracle for triconnected planar 
graphs and in Section [5] we extend it to a decremental subgraph connectivity oracle for triconnected 
graphs. Finally, in Section [6] we give reductions from general graphs to triconnected graphs, which 
do not assume planarity. 

2 Definitions, Notation, and Basic Results 

We assume that all graphs considered are undirected. A planar graph is a graph that can be drawn 
in the plane such that no two edges cross. We refer to such a drawing as a plane graph. A plane 
graph G = {V,E) partitions the plane into maximal open connected sets and we refer to the closure 
of these sets as the faces of G. If G is connected, we define a plane graph, called the dual graph 
G* of G, as follows. Associated with each face / of G is a vertex in G* which we identify with / 
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and which we draw inside /. For each edge e in G, there is an edge (/i, /2) in G*, where /i and /2 
are the faces in G incident to e. We draw (/i, /2) such that it crosses e exactly once and crosses no 
other edge in G or in G*. We identify (/i,/2) with e. It can be shown that G* is also connected 
and that (G*)* = G. In particular, each face in G* corresponds to a vertex in G. We refer to G as 
the primal graph. 

For vertices u and f in a rooted tree T, we let lcaT(ii, ti) denote the lowest common ancestor of 
u and V in T. Consider a spanning tree T in primal graph G. It is well-known that the edges not 
present in T form a spanning tree T* of G*. We call T* the dual tree of T. The following lemma 
is a well-known result |33j . 

Lemma 1. For an edge e in primal tree T, let f and g be the faces to either side of e in G. Then 
the edges of E \ {e} that connect the two subtrees ofT\ {e} are exactly those on the simple path in 
T* from f to g. 

A co-path is a sequence of faces that is a sequence of vertices in the dual that form a path. A 
co-path avoids a set of edges F if every consecutive pair of faces in the sequence shares an edge not 
in F. 

3 Edge Failures 

In this section, we develop a data structure that, given a planar undirected graph G = {V,E), an 
integer d > 1, and a dynamic subset of at most d failed edges, supports the following operations: 

1. update(F): set F to be the set of failed edges; 

2. connected? (ti, v): are vertices u and v connected in G \ F? 

We may assume that G is plane and connected. We will examine this problem in the dual by way 
of the following lemmas: 

Lemma 2. Two vertices u and v are connected in G\F iff there is a u-to-v co-path in G* avoiding 
F. 

Proof. If u and v are connected in G\F, then there is a u-to-v path P in G not using any edges in 
F. This path, viewed as a sequence of vertices in G is a sequence of faces, or co-path, in G*. Since 
consecutive vertices in P are adjacent by way of edges not in F, consecutive faces in the identified 
co-path share an edge not in F: this u-to-v co-path avoids F. 

Conversely, let P be a u-to-v co-path avoiding F. P is a sequence of faces in G*, and so is 
a sequence of vertices in G. Consecutive faces on P in G* share an edge avoiding F and so are 
adjacent by way of edges not in F: P is a path in G not using any edges in F. □ 

Consider the subgraph G*p of G* consisting of the failed edges, F. Let G*p inherit the embedding 
of G* . We refer to the faces of G*p as superfaces. Each superface corresponds to the union of faces 
of G*. 

Lemma 3. Let f and g be faces of G* . There is an f-to-g co-path in G* avoiding F iff f and g 
are contained in the same superface of G*p. 
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Proof. Suppose / and g are contained in different superfaces; let C be the set of edges that bound 
the superface containing /. Any f-to-g co-path requires a face on either side of C and so cannot 
avoid C, which is a subset of F. 

Suppose otherwise; let S be the set of faces of G* that form the superface fs containing / and 
g. Since fs is a face of G*p, there is a curve C contained entirely in fs that starts inside / and 
ends inside g. Consider the sequence of faces in S that this path visits; this is an F-avoiding f-to-g 
co-path as consecutive faces must share an edge that C crosses and this edge cannot be in F. □ 

We restate the operations in light of the corollary: 

Corollary 1. Two vertices u and v are connected in G\F iff u and v are contained in the same 
superface of G*p . 

1. update(F): set F to be the set of failed edges; 

2. connected? (ti, w): are u and v contained in the same superface of G^? 
3.1 The data structure 

Fix a rooted spanning tree T of the primal graph G. We use T to determine the superfaces of G*p 
containing the faces corresponding to the query vertices u and v. To do so, we require constant-time 
lea query support for T [25l El |8] . 

update(i<'): The edges F are listed in no particular order. We start by building the planar 
embedding of the subgraph G*p induced by F that is inherited from G* . Let V{F) be the endpoints 
of F (in the dual sense). For each vertex v G y{F) identify the edges of F incident to v and their 
cyclic ordering in G* . We can compute these orderings in sort((i, n) time. 

The boundaries of the superfaces given by G*p can be traversed in 0{d) time given this com- 
binatorial embedding. The set V{F) is the set of faces of G* that are along the boundaries of 
superfaces of G*p. Label a dual face/primal vertex in V{F) with the superface that contains it; 
mark the vertices of the static tree T with these superface labels. 

connected?(n, u): To answer a query connected?(n, t;), suppose we have identified the first and 
last marked vertices (if any) on the u-io-v path in T; call them u and wj^ By Lemmas [2] and [sj 
u and V are connected in G \ iff -u and v do not exist, or u and v are labelled with the same 
superface. Therefore, we need only identify u and v, if they exist. Lemma [4] shows that finding u 
and V is reducible to one least common ancestor query and 0(1) predecessor queries. 

Lemma 4. Let T he a tree of size n and M C V{T) be a set 0/ marked vertices, with \M\ = d. 
Then after 0{n) preprocessing (independent of M), an 0{d)-size data structure can he constructed 
in 0(sort(d, n)) time that answers the following query in 0(pred((i, n)) time: Given u,v £ ViT), 
what are the first and last M -vertices on the u-v path? 

^The cyclic ordering of edges incident to each vertex is sufficient to define the embedding. |16| 
^This is a shghtly more general problem than the marked ancestor problem considered by Alstrup, Husfeldt, and 
Rauhe [5]. 
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pre{y) < pre(«) 



y = u 
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Figure 1: Marked vertices are shaded red. (a) The nearest marked ancestor u' of u depends on 
whether the predecessor of pre(ii) is pre(y) (left) or post(?/) (right) for some marked y. (b) v' is the 
nearest marked ancestor of v. The last marked ancestor y on the u-to-v path is in fi~^{v'). 

Proof. Recall that T is rooted. Let w = lca{u,v). The first marked vertex on the u-to-v path is 
either the first marked vertex on the u-to-w path or the last marked vertex on the v-to-w path. 
Thus, we can assume without loss of generality that v is an ancestor of u. Fix an arbitrary DFS 
of T and let pre(x) (resp. post(rE)) be the time when x is pushed onto (resp. popped off) the stack 
during DFS. Given M, we first sort the pre and post indices of its elements, in 0(sort(d, n)) time, 
which allows us to label each x £ M with the nearest strictly ancestral M- vertex fi{x). Here it is 
convenient to assume that the root is marked (honorarily, if not in M) so /i(x) is defined everywhere 
except the root. We build a global predecessor structure on the set S = {pre(x), post(x) : x G M} 
and local predecessor structures on the sets Sx = {pre(a;') : x' £ n^^{x)}, where x G M and Sx is 
the set of "immediate" descendants in M connected by a path of non-M vertices. To answer a query 
u, V (where v is ancestral to u) we first find the closest marked ancestors n', G M as follows. Let i 
be the predecessor of pre(n) in S. If i = pre(y) for some y £ M then x is an immediate descendant 
of y and u' = y. If i = post(y) then let u' = n{y). See Figure [l]!|a). It follows that u' is an ancestor 
of u and that there are no other M- vertices on the path from u to u' . If u' is ancestral to v then 
there are no marked nodes on the u-v path, so assume this is not the case. In order to find the last 
marked vertex on the path from u to we search for the predecessor of pre(u) in S^i, say pre(y). 
Since there is some marked vertex on the path from u to v' it follows that u is a descendant of y, 
which is a descendant of v and that there are no other marked vertices on the path from y to v. 



We now have the following: 

Theorem 1. There is a data structure for planar undirected n-vertex graphs and any d > 1 that 
after 0{n) preprocessing time supports update{F) in 0(sort(d, n)) time, where F C E, \F\ < d, 
and supports connected?{u,v) in 0{pred{d,n)) time. 

4 Vertex and Edge Failures 

We now turn our attention to the scenario where both edges and vertices can fail. The additional 
challenge arises from high degree vertices that, when failed, can greatly reduce the connectivity of 
the graph. Nevertheless we will show how to maintain dynamic connectivity in time proportional 



See Figure [T]^b). 



□ 
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to the number of failed vertices, rather than their degrees. Formally, we develop a data structure 
that, given a planar, undirected graph G = {V,E), an integer d>l, and a dynamic subset of at 
most d failed edges and vertices, supports the following operations: 

1. update(F): set F to be the failed set of vertices and edges; 

2. connected? (ti, w): are vertices u and v connected in G \ F? 
As before we may assume that G is plane and connected. 



4.1 Vertex failures for triconnected planar graphs 

In this subsection we shall assume that G is triconnected. This allows us to apply Barnette's 
theorem, which states that every triconnected planar graph has a spanning tree of degree at most 
three |6]. Furthermore, such a degree-three tree, T, can be found in linear time |3T]. In Section [g] 
we show that this assumption is basically without loss of generality: we can reduce the problem 
on general graphs to triconnected graphs with an additive pred((i, n) slowdown in the query and 
update algorithms. 



Assume for simplicity that only vertices fail. Section 4.3 describes modifications needed when 
there is a mix of vertex and edge failures. Let C be the clockwise cycle that bounds the infinite and 
only face of T. G is an embedding-respecting Euler tour of T that visits each edge twice and each 
vertex at most three times. For a non-empty subset F of V, partition G into maximal subpaths 
whose internal nodes are not in F. Denote this set of paths by Vf- Note that \Vf\ < 3|-F| and 
therefore that a connected component of T\F is made up of possibly many paths in Vf- Assign 
the connected components of T \ F distinct colors and label each path in Vf with the color of its 
component. 

Let ei and 62 be the edges before and after a particular copy of vertex v in the order given by 
G. Let fi be the face of G to the left of e^. Root the dual spanning tree T* at the infinite face of 
G and let £ = lcaT*(/i, /2)- If ^ is not the root of T*, let be the parent edge of ^ in T*. Let 
L be the set of edg es Cy (if well defined) with neither endpoint in F for all failed vertices v (z F 
(according to their multiplicity in G). Note that |L| < 3d. By duality, we consider L as a subset 
of primal edges. Considered as an edge of the primal graph, forms a cycle with T that v is on; 
that is, witnesses an alternate connection should v fail. 

We define an auxiliary graph Hf that will succinctly represent the connectivity of Vf- The 
nodes of Hf are the paths in Vf- Two path-nodes Pi,P2 G Vf are adjacent in Hp iff 

• Pi and P2 have the same color and are consecutive paths in G among paths of the same color, 
or 

• there is an edge in L between the interior of Pi and the interior of P2- 

There are at most \Vf\ edges of the first type and \L\ edges of the second type. Since \Vf\ < 3d 
and \L\ < 3d, \Hf\ = 0{d). 

Lemma 5. Paths inVp CLfe connected in G\F iff they are connected in Hf- 

Proof. Consider distinct paths Pi and P2 in Vf- It is clear from the definition of L and Hp that 
if there is an edge (Pi,P2) in Hp then the interior of Pi and the interior of P2 are connected in 
G\F. This imphes the "if" part. 
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Since path-nodes of a given color class are connected by a cycle in Hp given by the paths order 
along C. If two paths are of the same color, their path-nodes will be connected in Hp. So, for 
the "only if" part, it suffices to show that if Pi and P2 are different colors but (by transitivity of 
connectivity) there is a single edge e e G\F between the interior of Pi and the interior of P2 , then 
they arc connected in Hp- 

So let e = (^1,^2) be such an edge where Ui € Pi. Let /i and /2 be the faces incident to e in G 
such that /i is the child of /2 in T* . Let / be the bounded face of T U {e} (which contains e and 
encloses /i). Let Vi be the failed vertex that is an endpoint of Pi on the bounded face of T U {e}. 

We continue by induction on the number of faces k > 1 of G contained in /. In the base case 
k = 1 and / = fi. Here e^-^ = 6^,2 = e, so e G L and (Pi, P2) is an edge of Hp. Now assume k > 1 
and that the inductive hypothesis holds for smaller values. 

If fi has a failed vertex v on its boundary, then we argue — e (and so (Pi, P2) is an edge of 
Hp). Consider the copy of v in the traversal of C that has fi to the left. Let gi and 52 be the faces 
to the left of the edges before and after this copy of v in C. Since e G T*, e is an ancestral edge of 
gi and g2. Since gi,g2,fi all contain v as a boundary vertex, Icar* (51, 52) = /i- 

Suppose that /i has no failed vertices on the boundary. For each edge e' 7^ e on the boundary 
of /i, if e' G T then e' belongs to a path of Vp. Otherwise, the bounded face of T U {e'} is 
contained in / and does not contain fi so it contains fewer than k faces of G. Then the paths of 
Vp containing the endpoints of e' in their interior are connected in Hp if they have distinct colors 
(by the inductive argument) or if they have the same color (by the start of this proof). Since this 
holds for every edge e' of /i \ {e}. Pi and P2 are connected in Hp, as desired. □ 

4.2 The data structure 

In a linear-time preprocessing step, we compute T, T*, and C and initialize an lea data structure. 

update (P): We build Hp for the input set of failed vertices P. Let / be the sum of the degrees 
in T of the vertices in P; note, / < 3d. Let P' be the multiset of failed vertices according to their 

multiplicity along C, i.e., their degree in T. Again, |P'| = /. Sort the vertices of P' according to 
their order along C. This provides an implicit representation of Vp. Label these paths according 
to their ordinal in P'; that is, path Pi is the path starting with the i''^ vertex in sorted P'. This 
takes time sort(/, n). 

Greedily assign colors to the paths, considering the paths in order. In each iteration we assign 
colors to all the paths in a given color class. Upon considering path Pj, if Pj has not yet been 
colored, assign it a new color. Check the second last endpoint of Pj and find the edge e that 
precedes that vertex in C after Pi. Let Pj be the path that starts with edge e (which can be found 
by e's starting point in C). Color Pj with same color as Pj. Repeat until returning to Pj. This 
takes time 0{f). 

Build the set L of edges. For each edge in L, identify the paths in Vp that contain its endpoints. 
We do this in bulk. Sort the set of endpoints of L along with P', that is, V{L) U P', according to 
their order along C. Traverse this order, assigning each endpoint in V{L) the path corresponding 
to the last failed vertex visited. This takes time sort(/, n). 

From L (with endpoints labelled with the appropriate path in Vp) and the colors of Vp, build 
Hp. Compute the connected components of Hp and label the path- nodes of Hp with the name of 
the connected component it belongs to. This takes time 0{f). 

The total time for update is bounded by sort(/, n) = 0(sort(d, n)). 
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coiinected?(n, f ): We may assume u,v ^ F. In 0{pied{d,n)) time identify any path con- 
taining u in the interior and any path containing v in the interior. By Lemma [Sj u and v are 
connected in G\F ifFP^ and Py are in the same connected component of Hp. The latter condition 
is checked in constant time given the labels of the connected components. 

4.3 Dealing with vertex and edge failures simultaneously 

We now extend our results above for triconnected planar graphs to handle both vertex and edge 
failures. As before, we precompute T, T* , C, and a structure for answering lea queries. An update- 
operation now gets as input a set F C VUE of size at most d. For the failures in FDV, we partition 
the tree into set Vp of paths as before. Edges of F that belong to T can be treated in a way similar 
to vertex failures (this can be seen easily by, say, introducing a degree two- vertex to the interior of 
each such edge and regarding it as a failed vertex) . 

What remains is to deal with failed edges that go between paths from Vp- The only modification 
we need to make to update is that when we find the lea- vertex I in T* of two faces of G incident 
to a failed vertex or edge of T, we need to check if the edge from / to its parent in T* has failed. 
If so, we need to walk up the path from I to the root r of T* until we find a vertex /' whose parent 
edge has not failed or /' = r. Our algorithm then has the same behaviour as the update operation 
of the previous subsection would have when applied to G \ (F n £') with input F CiV. 

The only issue is the additional running time needed to traverse paths to r in T* . We deal 
with this as follows. When a path has been traversed, we store pointers from all visited vertices to 
the last vertex on the path (i.e., the vertex closest to the root of T*). If in another traversal we 
encounter a vertex with a pointer, we use this pointer to jump directly to that last vertex. The 
total number of edges traversed in T* is then bounded by the number of failed edges which is at 
most d. Hence, update still runs in sort(d, n) time. The connected?-operation can be implemented 
as before. 

By Theorem [4] the algorithm above extends to general planar graphs with no asymptotic slow- 
down. 

Theorem 2. There is a data structure for any planar undirected n-vertex graph that, after 0{n) 
preprocessing time, supports update{F) in 0{sort{d,n)) time, where F (1 V U E, \F\ < d, and 
supports connect ed?{u,v) in 0{pred{d,n)) time. 

5 Decremental Subgraph Connectivity 

In this section, we consider the model in which updates and queries are intermixed. We only allow 
failures and not recoveries but no longer assume an upper bound d on \F\, that is, F is a growing 
set. 

As in Section |4j we first assume that G is triconnected and that only vertices can fail. Define 
T, T* , C, L, and F as before and build an lea data structure for T* . Initially L and F are empty. 
Redefine Hp to be (V,T \ F U L), that is, we no longer contract paths in Vp. For each vertex v we 
maintain a list L{v) of the lea-edges L incident to v. Represent L as a subset of marked edges of 
G. 

When a vertex v fails, unmark L{v) in L since L should only contain edges not incident to failed 
vertices. For each of the at-most-three occurrences of v along C, find the corresponding lea-edge 
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(if it exists); if has no endpoint in F, mark e„ as a member of L and add to the Usts of its 
endpoints. 

It follows easily from the definition of L and of Hp that both L and Hp are updated correctly 
after each failure. Lemma [s] (that two vertices are connected in G\F iff they are connected in Hp) 
holds with these definitions; the only difference is the interior of the paths from Vp are explicitly 
represented with the edges from T\F. Note that showing the requisite connectivity for Lemma [S] 
does not depend on lea-edges that have a failed endpoint. Removing (unmarking) the edges L{v) 
as members of L when v fails is equivalent to not including them in L as used in the proof of 
Lemma [H 

We maintain Hp with an oracle which allows us to delete an edge and an isolated vertex in 
O(logn) time [18] since a vertex failure results in at most three edges of T being deleted from Hp. 
Furthermore, at most three edges are added to L and each of these edges is added only to the two 
lists associated with its endpoints. Hence if F is the final set of deleted vertices, then a total of 
0(|F|) edges are added or removed from Hp and there are at most 0(|F|) updates to L and to the 
lists L{v). It follows that each deletion takes O(logn) amortized time. A connectivity query can 
be answered in O(logn) worst-case time with the oracle associated with Hp. 

So far we considered only vertex deletions. Edge deletions can be handled in the same way as 
in Section |4.3[ Using the reduction from general planar graphs to triconnected planar graphs in 
Theorem [5] we have the following. 

Theorem 3. There is a data structure for decremental subgraph connectivity in triconnected planar 
graphs that, after 0{n) preprocessing time, allows an intermixed sequence of vertex/ edge failures 
and connectivity queries in O(logn) amortized time per failure (i.e., f failures in 0(/logn) time 
total) and O(logn) worst-case time per query. In general planar graphs there is a data structure 
requiring O(log^n) amortized time per failure and O(log^n) worst-case time per query. 



6 Reductions to Triconnected Graphs 

In this section we give the reductions from general (planar) graphs to triconnected (planar) graphs 
that were used in Sections |4] and [5| Although the algorithm from Section [5] handles only failures, 
the reduction allows both failures and recoveries. 

Theorem 4. (The d-Failure Model) Suppose there is a connectivity oracle ^3 for any tricon- 
nected (planar) graph G with the following parameters. The preprocessing time is P^{n, m), the time 
to update the structure after d edge or vertex failures is U^[d,n), and the time for a connectivity 
query is Q^{d,n). Then there is a connectivity oracle A for any (planar) graph G with parameters 
P = 0{Ps), U = 0{U3 + sort(ci, n) + d ■ {Q3 + pred(fi, n))), and Q = OiQs + pred((i, n)). 

Theorem 5. (The Fully Dynamic Subgraph Model) Suppose there is a connectivity oracle 
A3 for any triconnected (planar) graph G with the following parameters. The preprocessing time is 
Psi^n, m), the time to process a vertex failure or recovery is U^{n), the time to process an edge failure 
or recovery U§{n), and the time for a connectivity query is Q^in). Then there is a connectivity oracle 
A for any (planar) graph G with parameters P = ©(Ps), = 0{{U§ + Qs + logn/ log log) logn), 
= 0{U^ + (C/| + (53 + logn/ log logn) logn), and Q = 0{{Qs + logn/ log logn) logn). 

The proof of Theorem |4] requires two steps: a reduction from connected to biconnected graphs 



and a reduction from biconnected to triconnected graphs. These are given in Sections 6.1 and|6.2| 
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Theorem [5] is proved in Section 6.3 Throughout this section we assume for simphcity that F C 
V{G) consists solely of vertices. 



6.1 Reduction to Biconnected Graphs in the (i-Failure Model 

Let i-2,C^2) and Q2 be the preprocessing, update, and query times for an oracle for biconnected 
graphs. Let A C V{G) be the set of articulation points (vertices whose removal disconnects G) 
and C be the set of biconnected components in G. The component tree Ti on the vertex set AuC 
consists of edges connecting articulation points to their incident biconnected components]^ Root 
T2 at an arbitrary A-node and let rep(C) £ A he the parent of C E C in Ti- The function cp maps 
graph vertices into their corresponding Ti nodes, that is, ii u £ A, (f){u) = u; otherwise, (j){u) = C 
where C is the biconnected component containing u. 

For any u G V{G)\F let rep**(u) be the most ancestral A-node reachable from u in G\F, or 
u if there is no such A-node, that is, if it G C E C is disconnected from rep(C). The goal of the 
preprocessing algorithm is to build a structure that lets us evaluate rep**. 

Processing Vertex Failures First, mark red every articulation point in F Ci A and blue every 
component C for which |l/(C)\{rep(C)} Ci F\ 7^ 0. This takes 0{d) time. For a Ti-node u, let 
rep*(u) be the most distant A-node ancestor of u reachable by a path of uncolored vertices. By 
Lemma [4] we can evaluate rep*(ii) in pTed{d,n) time with sort((i, n) preprocessing. (Note that 
rep*{u) does not exist if u G A is red or if n G C and rep(u) is red.) 

In 0{U2{d,n)) time preprocess each blue component C to support connectivity queries in 
V{C)\F. If rep(C) is uncolored, let C be the parent of rep*(C) in Ti. (It may be that rep(C) = 
rep*(C).) Determine if rep*(C) and rep(C') are still connected in V{C)\F via one connectivity 
query and, if not, mark red the edge (rep*(C), C). A red edge indicates that rep*(C) is discon- 
nected from rep(C') but possibly still connected to other vertices in C. It takes 0{d- Q2{d, n)) time 
to find all such red edges. For n G A U C let rep**(u) be the most distant A-node ancestor of u 
reachable by a path of uncolored vertices and edges. Using a preorder traversal of the blue nodes, 
compute rep**(rep(C)) for all blue C in 0{d) time. 

Connectivity Queries To evaluate rep**(x) and rep**(x') we require two intra-component con- 
nectivity queries and two rep* queries. To determine if x and x' are connected we may require an 
additional intra-component connectivity query, for a total time of 0{Q2{d,n) + pred{d,n)). 

Let xi = ^(x) and x'l = (^{x') be the corresponding nodes in Ti- Let X2 = rep*(xi) and, if 
rep*(xi) exists, let C2 be the parent of X2- If X2 does not exist let X3 = x and let C3 be x's 
component. If X2 exists and is connected to rep(C2) let X3 = rep** (rep (C2)), otherwise let X3 = X2; 
in both cases let C3 be the parent of X3, if X3 is not already the root. It follows that X3 is a graph 
node, not a component, that x is connected to X3 in G\F, and that X3 is disconnected from rep(C3). 
The nodes C[, Xg, Cg, Xg, and Cg are defined similarly. It follows that we must return connected if 
X3 = X3, disconnected if C3 7^ C3, and connected if X3 and X3 are connected in C3 = G'^. In total 
there are up to three intra-component connectivity queries, on the pairs (x2, rep(C2)), {x'2, rep(C2)), 
and {x3,x'^). There are two necessary queries to rep*(xi) and rep*{x[). The nodes rep**(rep(C2)) 
and rep**(rep(C2)) were computed when processing F. 

*The subscript 2 refers to biconnectivity. 
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Figure 2: Three examples of queries. Square nodes represent biconnected components, round 
nodes are articulation points. A round node shaded red is a failed articulation point. A square 
node shaded blue is a component with at least 1 failure. An edge {z, C) shaded red indicates that 
z is disconnected from rep(C), but not necessarily from other nodes in C. 

6.2 Reduction to Triconnected Graphs in the rf-Failure Model 

An SPQR tree Ta represents how a biconnected graph G is assembled form its triconnected compo- 
nents through merging operations. All separating pairs of G are given implicitly by Ts. Let Hi and 
H2 be two edge-labeled multigraphs, where V{Hi) n V{H2) = {x,y} and where e = {x,y) appears 
in both E{Hi) and E[H2) with the same label. Then merging Hi and H2 results in a new graph 
H2, = iy{Hi) U V{H2), E(Hi) U E(H2)\{e}). That is, e does not appear in the merged graph but 
X and y may still be adjacent in H3 if there were multiple edges between x and y in either Hi or 
H2. 

Each node u € T3 is associated with a triple {M^, Gu, T^iu)), where M„ is the model graph, one 
edge 7r{u) G E{Mu) is distinguished as the polar edge whose endpoints are poles. Let p{u) be the 
parent of u in Ts and T^iu) the subtree rooted at u. The graphs Mu and Mp(„) have exactly two 
vertices in common, namely the endpoints of t^{u), and each contains identically labeled copies of 
■k{u). Moreover, for any two Ts-nodes on opposite sides of the edge {u,p{u)), their model trees do 
not intersect, except possibly at the poles of 7r(u). The graph Gu is formed by merging all model 
trees in Tz{u). That is, u has children ui, ■ ■ ■ ,Uk where V{Gui) 2 V{Mui) and G„. contains the 
polar edge -Kiui). Obtain Gu by merging {Gu^} with Mu along the polar edges {7r(nj)}. (Observe 
that the polar edge 7r(u) G E{Mu) remains in E{Gu)-) Let G~ be Gu without its polar edge t:{u). 

The tree Ta is conceptually constructed in a top-down fashion as follows. (Linear time tri- 
connectivity algorithms [271 EHl US] can be used to construct Ts.) The root r is associated with 
Gr = G and an arbitrary polar edge ir{r) G E{G). In general, we are given a Ts-node u and pair 
(Gn,vr(n) G E{Gu))- We must select a model multigraph Mu and then recursively construct the 
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subtree T^{u). The reader may want to refer to an illustration of a graph and its SPQR-tree in 
Figure [3} 

Parallel Case (P-node). The endpoints of 7r(n) = (vro,7ri) split E[Gu) into k + \ components 
Tr{u),G~^, . . . ,G~^ where k > 2. Let Gu^ be G~ augmented with a freshly labeled polar edge 
Tr{ui) = (ttctti) and let Mu consist of fc + 1 parallel edges {7r(u), 7r(ui), 7r(ufc)}. Clearly merging 
{Gui} with Mu yields Gu- For each nontrivial G~. (nontrivial means having more than one edge), 
create a new child Ui of u and recursively compute its subtree in Ta 

Series Case (5-node). Let tt{u) = (7ro,7ri) and let 7r2, . . . ,7rfc be the articulation points of G~. 
If there are any such points {k > 2) let vr(u), G~^, . . . , G~^ be the partition of Gu into edge-disjoint 
subgraphs such that G~. and G~.^_^ meet at vTj+i. Let M„ be the cycle (ttq, . . . , Tr^, ttq) and let 
Gui be G~. augmented with a polar edge (vTjjVTj+i) (where iTk+i = vro), whose label matches the 
corresponding edge in My.. For each non-trivial G~_ form a new child Ui of u and recursively 
compute its subtree in Ts- 

Rigid Case (i?-node). The previous two cases do not apply. A separating pair a = {vrQ,7r^} 
of Gu splits it into some number of components Hi, . . . , Hi with 7r(n) G E{Hi). Let H{a) = Hi 
and H'[a) be the union of H2, . . . ,Hi. Call a maximal if there is no separating pair f3 for which 
H{f3) is strictly contained in H{a). Let {7r(Mj)}i<j<fc be the set of k maximal separating pairs with 
respect to 7r(u). We give u children ui, . . . ,Mfc where Ui is given the graph Gu^ = H'{-K{ui)) and 
polar edge ^{ui). The model graph M„ is induced by E{Mu) = E{H{Ti{ui))) n • • • n E{H{'K{uk))) U 
{'k{ui), . . . , 7r(Mfc)}, that is, it is obtained from Gu be replacing H'{7r{ui)) with the tij's polar edge 
7r(iij), for all i. The maximality of the separating pairs ensures that Mu is triconnected, also called 
rigid. 

Observation 1. In T3 there are no adjacent P -nodes nor adjacent S -nodes. 

The edges in a model graph Mu that do not appear in G are artificial and represent paths in 
G. Our goal is to reduce a connectivity query in G to a constant number of connectivity queries in 
model graphs, so it is important that we identify the set of invalidated artificial edges. 

Preprocessing Vertex Failures Let (piz), where z G V{G), be the most ancestral Ts-node u 
for which z G V{Mu) and let cl)^^{u) = {z : </)(z) = u}. (Note that z can appear in an unbounded 
number of model trees as a pole.) We begin by coloring blue those Ta-nodes u for which the endpoints 
of 7r(n) may be disconnected in Gu\E. Specifically, repeatedly color blue any u satisfying one of 
the following criteria: 

1. M = (j){z) for some z £ F. 

2. u is an 5'-node with at least one blue child. {Mu\7t{u) is a path, so the removal of one vertex 
or edge disconnects n's poles.) 

3. u is either an R- or P-node with at least two blue children. (There are at least two internally 
vertex-disjoint paths between the endpoints of 7r(u) in Mu\tt{u), so the removal of just one 
vertex or edge cannot disconnect u's poles.) 

^In previous work on SPQR trees fT trivial graphs are actually assigned to children of u. They are called Q-nodes. 
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Figure 3: Above: a schematic of a biconnected graph; vertices internal to subgraphs a, . . . ,1 are 
not shown. Below: The corresponding SPQR-tvee Ti, with mergeable edges labeled. Adjacent to 
each n G Ts is its model graph 
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Lemma 6. There are fewer than Ad blue nodes. They can be found in 0{d) time. 

Proof. There are clearly at most d blue nodes due to criterion (1) and at most d—1 due to criterion 
(3). Since, by Observation [l| there are no adjacent S*- nodes, the number due to criterion (2) is 
no more than the number due to criteria (1) and (3). They can be found in 0{d) time as follows. 
For each z G F color blue and continue to color any immediate ancestors blue if they satisfy 
criteria (2) or (3). The first ancestor not colored blue is noted as having one blue child. The time 
per F-node is 0(1) plus the number of formerly uncolored ancestors colored blue. □ 

Next we color purple all blue nodes u for which the poles of 7r(n) = (7ro,vri) are disconnected 
in G~\F (that is, ignoring parts of the graph outside u's subtree), as follows. Traverse the blue 
nodes in Ts in postorder. If either of ttq or vri is in F then they are trivially disconnected, so color 
u purple. If n is a P-node then ttq and vri are still connected if they are connected in any child of 
u, so color u purple if all its children are purple. If u is an S-node then ttq and tti are disconnected 
if the poles of any child Ui of u are disconnected, so color u purple if any child is purple. Finally, if 
u is an R-node, construct a connectivity oracle A~ for avoiding vertex failures FCi V{Mu) and 
edge failures {7r(n)} U {vr(tt') : is a purple child of u}. (The edge failures reflect the fact that 
the polar edges of purple children are definitely invalidated by the failures and it is not yet known 
if tt(u) is invalidated.) Perform one query on to determine if vro,7ri are disconnected in G~\F 
and, if so, color u purple. 

We also construct connectivity oracles for each colored S- and P-node u in G^\F. This is trivial 
if u is a P-node. (M^ contains two vertices, which are either connected or not.) If u is an S'-node 
then M„ is a cycle and a connectivity query can be answered with predecessor search, in pred((i, n) 
time. The time to construct oracles for all colored nodes is 0{U{d, n) + sort((i, n) + d ■ Q{d, n)). 

Lemma 7. In the construction of connectivity oracles {A^}, there are 0(d) vertex and edge failures 
in total. 

Proof. Each colored node u can contribute one edge failure to A~^^y namely the polar edge 7r(u). 
Note that FriV{Mu) can include at most two additional vertices than {z £ F : (j){z) = u}, namely 
the poles of ■n{u). Thus, the total number of failures is linear in d and the number of colored nodes, 
which are fewer than Ad. □ 

Let rep**(2;) be the farthest ancestral pole reachable from z G V{G)., or z if there is no such 
pole. Specifically, let w G Ts be the farthest ancestor of (j){z) such that z is connected to either pole 
in 7r(n) in G~\F. If there is no such u {z is disconnected from Tr{(f){z))) then rep**(2;) = z and if 
z is connected to both poles 7r(u) then rep**(z) can be either one. Our goal is to preprocess F so 
that we can quickly evaluate rep**. 

Let rep(2;) be either pole in TT{(j){z)) connected to z in G^^^y or undefined if there is no such 
pole. Let rep*(z) be the farthest ancestral pole reachable from z via uncolored Ts nodes, defined 
precisely as follows. If 4>{z) = u and u is colored then rep* (2) is undefined. If u is uncolored and 
z is disconnected from both of ti's poles (this can only happen if they are in the failure set) then 
rep*(2;) is undefined. Otherwise let u be the farthest ancestor of u such that the Ts-path from u 
to u is uncolored and at least one pole of u is not in F. Then rep*(z) is any non-P pole of u. By 
Lemma|4| T3 can be preprocessed in sort{d,n) time to support rep* queries in pred((i, n) time. 

We calculate rep** on each pole z of each colored Ts-node n by a preorder traversal of such 
nodes, as follows. 
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1. z £ F then rep**(z) is undefined. 

2. If u is the root of T3 or is a colored node without a colored ancestor then rep**(z) is a pole 
of the root of T3. 

3. If (j){z) is colored then let rep**(2;) = z if rep(2:) is undefined (it is disconnected from both 
poles of (p{z)) and rep**(rep(z)) otherwise. 

4. If 0(z) is uncolored then let rep**(z) = z if rep*(z) is undefined (it is disconnected from both 
poles of (p{z)) or rep*(z) if rep(rep*(2;)) is undefined (rep*(2:) is disconnected from both poles 
of (/>(rep*(2;))) or rep**(rep(rep*(z))) otherwise. 

Note that we calculate rep** explicitly on only 0{d) vertices, which takes O^d-maxlQs^d, n), pred(d, n)}) 
time. 



Connectivity Queries The query asks whether x and x' are connected in G\F, where x, x' F. 
Our goal is to reduce this to 0(1) connectivity queries to the oracles associated with colored T3- 
nodes. 

Let xi = rep*(x) if (p{x) is uncolored and x if 4'{x) is colored. It follows that (/>(a;i) = ui is 
colored. Using two connectivity queries on ui's oracle (between xi and the poles of ui) determine 
X2 = rep(xi). If X2 is defined let X3 = rep**(x2); otherwise let ^3 = xi. It follows directly from the 
definitions of rep, rep*, and rep** that X3 = rep**(x) is the most ancestral pole connected to x, or 
is X if there is no such pole. In any case let M3 = (pix^) and define x'l, X2, x'^,u'^ analogously, with 
respect to x' . 

Lemma 8. Vertices x and x' are connected in G\F if and only if U3 = Ug and X3 and x'^ are 
connected in G\F. It requires 0{Q3{d,n) + pied{d,n)) time to answer a connectivity query. 

Proof. Note that by definition of rep, rep*, and rep**, x is connected to xi, xi is connected to X2 
(if it exists), and X2 is connected to X3, hence x is connected to X3. Thus, x and x' are connected 
if and only if X3 and Xg are connected, which is determined by u-^s oracle if M3 = Ug. (Note that 
U3 is either colored and we have such an oracle, or U3 is the uncolored root and X3 = Xg.) 

Observe that if U3 is not the root, X3 is, by definition of rep**, disconnected from the poles 
71(143), find therefore also disconnected from every vertex in V{G)\V{Gu:i)- '^^^ same is true of Xg 
and V{G)\V{Gy_0. If U3 / Ug then either Xg Vi^Gu^) or X3 V{G^0, that is, X3 and Xg must be 
disconnected. 

Concerning the time bound, we spend 0(pred((i, n)) time on queries to rep* and 0(max{(5(d, n), pred((i, n 
time on queries to rep and the connectivity query between X3 and Xg. □ 



6.3 Reduction to Triconnected Graphs in the Fully Dynamic Model 

We prove Theorem [5] assuming, for notational simplicity, that the graph is biconnected and associ- 
ated with an SPQR-ticee T3. It is easy to extend this algorithm to all graphs. 

An obvious strategy is to maintain the structure from Section 6.2 that is, to maintain the ability 
to evaluate rep* on all vertices, rep on vertices in colored Ts-nodes, and rep** on the poles of colored 
nodes. The first difficulty is that a vertex failure z at some (piz) deep in T3 can cause virtual edge 
failures in the model graphs of every ancestor of (j){z) and potentially change the colored/uncolored 
status of such nodes. Thus, we cannot afford to explicitly maintain connectivity oracles at each 
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colored nodejj If we do not maintain explicit connectivity oracles then evaluating rep**(z) seems 
impossible since it is a function of 0(1) rep-queries at each colored ancestor of 4>{z). 

Our solution involves three main ideas. The first is to partition Ta into heavy paths, a standard 
technique that ensures every node-to-root path intersects at most loglTs] < logn distinct paths. 
This introduces a logn-factor overhead and reduces the problem to one on paths, yet it does not 
help us stop changes deep in Ts from propagating upwards. Two consecutive nodes u and p{u) on 
a heavy path share two vertices, namely -7r(u). Our second idea is to make p{u) indifferent to all 
changes in V{Gu)\t^{u) by having it maintain two candidate connectivity oracles, one where 'k{u) 
is invalid (its endpoints are disconnected in G^\F) and one where ■n{u) is valid. This solves the 
propagation problem, but we must be able to determine which of p(n)'s candidate oracles reflects 
the actual failure set F. The third idea is to reduce a rep**-query to O(logn) ID product queries 
over the domain of 2 x 2 boolean matrices. Updates and queries to such a structure will take 
0(logn/ log logn) time. 



Heavy Path Decomposition Let each nonleaf u G T3 choose a child c{u) maximizing the 
number of descendants of c(u). These choices partition the nodes of Ta into a set V of heavy paths 
such that all leaf-to-root paths intersect at most logn such paths. Let P{u) be the heavy path 
containing u and root(u) = root(P(n)) be the most ancestral node in P{u). Define 7r(ti) = 7r(c(n)) 
to be the subpolar edge of u Let G~ be the subgraph of G~ induced by V {Gu)\(t>~^ {T-i{c{u))) , that 
is, G~ excluding vertices in y(Gc(u))\7r(c(ti)). 



Twin Connectivity Oracles Each non-leaf u £ T3 maintains two connectivity oracles for G~ 
based on the current set F of failed vertices. Let F{u) = F (1 (Tsiu)) be the failed vertices in 
V{Gu), excluding the poles n{u), if u is not the root of T3. Let F^{u) = F{u) U (/>~^(73(c(m))) and 
F^{u) = F{u)\(p~^ (T3 {c{u))) reflect versions of reality where all or none of the vertices in c(ti)'s 
subtree fail. The oracle A!^ answers connectivity queries between V{Mu) vertices in the graph 
G~\F^{u) whereas is defined with respect to F^{u). If we restrict our attention to connectivity 
in V{Mu), at least one of and A^ behaves correctly, with respect to the failure set F{u). In 
order to determine which one is correct let us dispense with the old blue/purple/uncolored coloring 
systerr[^ from Section 6^ and designate all Ts-nodes white, grey, or black. A node u is white if the 



poles 7r{u) are disconnected according to Aj^, black if they are connected according to A^, and gray 
if they are connected according to A}^ but not A^. In other words, in a gray u, all paths between 
Tr(u) in G~\F{u) go through the subpoles fc{u). If tt is a leaf it has no subpoles and therefore 
cannot be gray, since A^ = A^^. Before continuing, let us note that before any vertex failures occur, 
all non-leaf S-nodes are gray (removing 7r(n) and Tr{u) disconnects the poles in M^, which is a 
cycle) and all P- and i2-nodes are black since there are at least three edge-disjoint paths between 
7t{u) in M„. 

In order to determine whether the poles 'tt{u) are actually connected in G~\F{u) it suffices to 
maintain a predecessor structure on all non-gray nodes in P{u), which we view as oriented towards 
root(P(tt)). Let u' be the predecessor of u on P{u), that is, the first non-gray descendant of u on 
P{u), which may be u itself. (There must be such a u' since leaves cannot be gray.) If u' is black 

®Even the isolated problem of deciding whether a node is colored is non-trivial. In the absence of i?-nodes this is 
equivalent to dynamic AND-OR tree evaluation. 

''Note that it is problematic to assign Ta-nodes these colors since u may be colored purple according to Au but 
not Al. 
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then the poles tt{u) are connected in G~\F(u), and if white, they are not. It takes O(loglogri) 
time per query or to delete/insert any node into the predecessor structure, which corresponds to a 
color transition to/from gray. 

Lemma 9. A failure or recovery can invalidate the color designation of at most logn Ts-nodes. 

Proof. Consider the failure or recovery of a vertex z with = u and P = P{u). This change 
might cause the color of u to change, but, by definition, cannot invalidate the color of any other 
u' G P. Now consider v = p(root(P)), if root(P) is not already the root of Ti- The twin connec- 
tivity oracles for v entertain the possibility that 7r{v) £ E{My) is invalid or valid, but both must 
represent the actual validity of the edge 7r(root(P)) G E{My), which may have changed due to the 
failure/recovery of z. Thus, changing the status of z may affect v but no other nodes on P{v) and, 
in general, affects up to one node on each heavy path traversed from 4>{z) to the root of Ts. □ 

Dynamic Matrix Products Suppose P = {ui, . . . , U|p|) is a heavy path. If we are only con- 
cerned with connectivity between poles of nodes in P, each node Uj is effectively in one of 16 
states depending on whether each pole in 7f(?ij) is connected, in the graph G~.\F{ui), to each 
pole in 7r(uj)|^ Let cTj be a 2 x 2 boolean matrix representing this connectivity. (In other words, 
a node's poles are ordered in some consistent fashion to map to rows and columns.) It follows 
that the boolean product (Xj • • • aj represents the connectivity between 7f(uj) and 7r(tij) in the graph 
(G~.U- • ■L)G~.)\F(uj). Our algorithm for computing iep**{z) (and answering connectivity queries) 
requires a dynamic data structure for answering various product queries. 



2. update(z, a): cti ^ a, where o" is a 2 x 2 boolean matrix. 

3. product(i, j): Return o"i • • • aj. 

4. search(x, x', i): Return max{j > i — 1 : x(cJi Ax') • • • {aj Ax') / 0}, given boolean row vector 
X and 2x2 mask x'. 

Lemma 10. After o{n) preprocessing, all operations (update, product, search) can be executed 
in 0(log |P|/ loglog n) = 0(logn/ log logn) time. 

Proof, (sketch) Each ai requires 4 bits to represent, so 0(logn) matrices can be packed into one 
machine word. We maintain a 0(logn)-way tree over the array, where {<7i}i<i<|P| the leaves 

and internal nodes store the product of their descendant leaves. All operations either need to 
update or retrieve 0(1) words of information at each of 0(log iPj/ loglogn) levels, which can be 
done in O (log |P|/ log logn) time by tabulating various functions on 0(logn) bits in advance, in 
o(n) time. □ 

Define repp (z) for (j){z) G P, to be the pole most ancestral to (p{z) connected to z in G~^^^^p^\F, 
or z if there is no such pole. If repp (z) is not a pole of root(P) then clearly repp (z) = rep**(z). In 
general a rep** (z) query is easily reduced to log n repp queries, for the heavy paths P intersecting 
the path from (j)(z) to the root of Ts, so we shall focus our attention solely on evaluating repp*(z), 
where (piz) = Ui £ P. We compute repp*(2:) as follows. 

^Since connectivity is transitive, not all 16 states are possible. 
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1. Our first task is to determine the boolean vector x representing the connectivity between z 
and the poles 7r(nj) in G~.\F. Using one predecessor query on the non-gray nodes in P we 
determine which reflects reality, where a G {0, 1}, then determine x with two connectivity 
queries to A'^.. If x = then let repp (z) = z and halt. 

2. Otherwise let j = search(x, ( J \ + 1). Let p C Tr{uj) be the poles reachable from z in 
G~.\F{uj). It follows that z is disconnected from both poles of Uj+i in G~.^_^\F{uj^i), if 
Uj 7^ root(P). If there is some pole in p\F let repp (z) be any such pole and halt. (Recall 
that F(uj) is the set of failures in V{Guj) excluding its poles.) 

3. If the procedure has not halted then p Q F. For any index 1 < / < |-P| let '7t{ui) = (vTgjVr^^). 
Without loss of generality suppose ttq G p, and that / G is the minimum index such 
that ttq = • • • = vtq and, if tt-J £ p, ttI 7^ tt-J. (Recall that a pole can appear in an unbounded 
number of nodes along P.) At least one of the poles in Tf{uj') is connected to z. If 7r| is 
disconnected from z then repp(2;) can be either pole of tt^uj') connected to z. Otherwise 
repp (z) is the most ancestral pole among vrj , . . . , Trj^^ connected to z, which can be found as 
follows. Let /' = search((J), (U where the first and second arguments encode that 

we are only interested in connectivity between tt-j' , . . . , t^i~^ ■ If vr^ ^ F then repp (z) = vr-J , 
otherwise repp (z) = vrj where j'" < j" is the maximum index such that vrj 7^ tt'J . 

The time bounds claimed in Theorem [5] follow easily. It takes linear time to build the SPQR- 
tree, decompose it into heavy paths, build the white/black predecessor structure and boolean 
product structure on each heavy path, and augment it with various pointers, e.g., pointers from 
each node to the root of its heavy path. A vertex update on z induces vertex updates in the oracles 
and updates to the color and 2x2 matrix of (t>{z), which take 0(logn/ loglogn) time, 

then O(logn) edge updates in ancestors of (/>(z) together with O(logre) color and matrix updates. 
A query on amounts to computing a connectivity query between rep**(x) and rep**(a;'). A 
rep** evaluation reduces to log n repp evaluations, which involve a constant number of queries and 
operations on the matrix product data structure, for a total time of 0{\.ogn{Q^ + log n/ log log n)). 
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